
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/75211e-3619-425f-babd-79dc3d0bbed8/1/IY2yiCPzcIslWqEkum73QdET6vM.mft
File: IY2yiCPzcIslWqEkum73QdET6vM.mft (raw, json)
Hash identifier: K0tNa2oEzPm+WZTx1v8KOuCtqsaTF0CSRoxD4OhLQwg=
Subject key identifier: 5D:49:5D:58:DE:69:99:51:45:66:55:D2:C7:55:46:CE:A5:06:FD:78
Authority key identifier: 21:8D:B2:88:23:F3:70:8B:25:5A:A1:24:BA:6E:F7:41:D1:13:EA:F3
Certificate issuer: /CN=218db28823f3708b255aa124ba6ef741d113eaf3
Certificate serial: 019EC224BC23E9214DCDDC00F3058ACC894D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IY2yiCPzcIslWqEkum73QdET6vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/75211e-3619-425f-babd-79dc3d0bbed8/1/IY2yiCPzcIslWqEkum73QdET6vM.mft
Manifest number: 1156
Signing time: Sat 13 Jun 2026 18:00:47 +0000
Manifest this update: Sat 13 Jun 2026 18:00:47 +0000
Manifest next update: Sun 14 Jun 2026 18:00:47 +0000
Files and hashes: 1: IY2yiCPzcIslWqEkum73QdET6vM.crl (hash: q1VdZ5eBvwNv14GYPWeUxz2fBGrlR1qeeY4dq3c/Hpw=)
2: f7qLZUl_FwNxE3w_k0K8MDDnPE4.roa (hash: iT3SrQGihsPU4xD+7248AXf2sfstLnnSHt1kFE/x28E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/75211e-3619-425f-babd-79dc3d0bbed8/1/IY2yiCPzcIslWqEkum73QdET6vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/75211e-3619-425f-babd-79dc3d0bbed8/1/IY2yiCPzcIslWqEkum73QdET6vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IY2yiCPzcIslWqEkum73QdET6vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:24:bc:23:e9:21:4d:cd:dc:00:f3:05:8a:cc:89:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218db28823f3708b255aa124ba6ef741d113eaf3
Validity
Not Before: Jun 13 18:00:47 2026 GMT
Not After : Jun 14 18:00:47 2026 GMT
Subject: CN=5d495d58de699951456655d2c75546cea506fd78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ab:9e:b0:5d:77:4f:9b:67:27:28:5c:a0:45:
0f:46:b6:90:24:6a:5a:52:d6:15:97:ab:85:c0:ec:
72:29:9e:ac:c1:19:74:8d:79:38:c6:0c:3a:ab:40:
5f:0f:43:d3:f8:7f:0a:d1:35:1f:12:b0:09:60:9c:
23:e0:7c:40:58:05:c8:1e:ed:4c:9c:1d:fa:d4:b0:
73:02:cf:0f:69:ba:23:41:7d:db:f6:83:95:10:d9:
b3:93:84:ca:97:30:04:d4:18:93:dd:68:d3:8a:2d:
1a:08:93:8d:87:52:48:a5:32:5c:64:2d:f8:bb:3a:
45:63:7d:34:8e:ec:35:5a:0e:1f:f1:e9:f4:21:ed:
26:14:7d:45:7a:0c:df:46:20:e6:8b:81:d5:c0:89:
6c:ef:65:23:3b:f1:01:ed:40:3e:2e:9f:c5:4e:7f:
ea:f4:92:cb:4d:02:1f:d0:7e:ee:92:5b:81:ab:ea:
98:72:91:e2:45:5b:b3:15:8e:11:73:44:c0:13:9a:
de:e5:58:2d:63:cd:0d:87:71:25:b0:0b:a0:aa:a1:
38:6b:f0:bb:e5:69:7d:12:71:bd:14:99:b4:0c:d2:
ed:7c:9b:2e:3a:4e:4b:f5:59:17:64:53:1f:ca:e3:
eb:24:1d:5e:8a:ba:4b:fa:7f:6d:ab:45:0d:8c:cb:
2c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:49:5D:58:DE:69:99:51:45:66:55:D2:C7:55:46:CE:A5:06:FD:78
X509v3 Authority Key Identifier:
keyid:21:8D:B2:88:23:F3:70:8B:25:5A:A1:24:BA:6E:F7:41:D1:13:EA:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IY2yiCPzcIslWqEkum73QdET6vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/75211e-3619-425f-babd-79dc3d0bbed8/1/IY2yiCPzcIslWqEkum73QdET6vM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/75211e-3619-425f-babd-79dc3d0bbed8/1/IY2yiCPzcIslWqEkum73QdET6vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:ad:e0:c9:58:d5:2a:8d:5f:ab:62:df:4f:1b:72:0d:d5:64:
1b:02:c1:82:7e:bf:ac:cd:02:93:23:53:74:ca:b4:af:57:c6:
ec:19:5a:ab:30:e9:76:fc:20:0d:7a:c5:fc:57:9e:a1:56:e7:
e2:26:7c:74:7d:e3:ce:31:72:28:04:ed:85:9c:d5:c0:b9:f4:
a8:9b:01:1d:56:29:40:26:0f:ce:a6:ea:ce:f6:5c:a7:1c:71:
4f:17:02:0b:a1:26:9c:74:5e:24:f3:50:de:83:be:3a:96:23:
39:4e:35:89:1a:55:2a:9c:4b:72:5a:33:9a:89:a0:7d:6c:0a:
bd:3e:50:9c:d3:cd:e5:fc:2e:ee:7e:13:00:ef:72:8b:71:52:
86:31:00:1a:10:f2:5e:cd:7a:9b:e6:09:09:14:90:f2:c2:e8:
d1:7c:5b:37:de:31:d7:4e:b4:db:88:72:13:47:e4:21:03:a6:
75:3a:29:b7:f7:20:7b:ad:da:31:8b:12:74:44:1e:30:60:9c:
51:8b:44:fc:7e:65:ff:54:b6:64:47:77:2d:44:19:82:35:ff:
fa:f0:04:63:e9:9f:38:52:6c:ef:a8:0a:10:2c:53:91:d2:0b:
a0:42:83:ad:4d:98:0c:8e:54:68:69:5f:e3:aa:23:b8:be:89:
16:63:b9:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CJLwj6SFNzdwA8wWKzIlNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxOGRiMjg4MjNmMzcwOGIyNTVhYTEyNGJhNmVmNzQxZDEx
M2VhZjMwHhcNMjYwNjEzMTgwMDQ3WhcNMjYwNjE0MTgwMDQ3WjAzMTEwLwYDVQQD
Eyg1ZDQ5NWQ1OGRlNjk5OTUxNDU2NjU1ZDJjNzU1NDZjZWE1MDZmZDc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKuesF13T5tnJyhcoEUPRraQJGpa
UtYVl6uFwOxyKZ6swRl0jXk4xgw6q0BfD0PT+H8K0TUfErAJYJwj4HxAWAXIHu1M
nB361LBzAs8PabojQX3b9oOVENmzk4TKlzAE1BiT3WjTii0aCJONh1JIpTJcZC34
uzpFY300juw1Wg4f8en0Ie0mFH1FegzfRiDmi4HVwIls72UjO/EB7UA+Lp/FTn/q
9JLLTQIf0H7ukluBq+qYcpHiRVuzFY4Rc0TAE5re5VgtY80Nh3ElsAugqqE4a/C7
5Wl9EnG9FJm0DNLtfJsuOk5L9VkXZFMfyuPrJB1eirpL+n9tq0UNjMssNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF1JXVjeaZlRRWZV0sdVRs6lBv14MB8GA1UdIwQY
MBaAFCGNsogj83CLJVqhJLpu90HRE+rzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVkyeWlDUHpjSXNsV3FFa3VtNzNRZEVUNnZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS83NTIxMWUtMzYxOS00MjVmLWJhYmQt
NzlkYzNkMGJiZWQ4LzEvSVkyeWlDUHpjSXNsV3FFa3VtNzNRZEVUNnZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS83NTIxMWUtMzYxOS00MjVmLWJhYmQtNzlkYzNkMGJiZWQ4
LzEvSVkyeWlDUHpjSXNsV3FFa3VtNzNRZEVUNnZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACK3gyVjV
Ko1fq2LfTxtyDdVkGwLBgn6/rM0CkyNTdMq0r1fG7BlaqzDpdvwgDXrF/FeeoVbn
4iZ8dH3jzjFyKATthZzVwLn0qJsBHVYpQCYPzqbqzvZcpxxxTxcCC6EmnHReJPNQ
3oO+OpYjOU41iRpVKpxLclozmomgfWwKvT5QnNPN5fwu7n4TAO9yi3FShjEAGhDy
Xs16m+YJCRSQ8sLo0XxbN94x106024hyE0fkIQOmdTopt/cge63aMYsSdEQeMGCc
UYtE/H5l/1S2ZEd3LUQZgjX/+vAEY+mfOFJs76gKECxTkdILoEKDrU2YDI5UaGlf
46ojuL6JFmO5uQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:26:23 2026 by rpki-client